Methods and systems are presented for detection of malware such as worms in which a network switch entices the malware into sending scan packets by allocating one or more ports as bait addresses, sending outgoing bait packets,and identifying compromised hosts that send unexpected incoming packets to a bait address.
申请公布号
WO2009107115(A2)
申请公布日期
2009.09.03
申请号
WO2009IB51315
申请日期
2009.02.17
申请人
ALCATEL LUCENT;CHOW, STANLEY TAIHAI;BASSEM, ABDEL-AZIZ;KHAN, FAUD AHMAD
发明人
CHOW, STANLEY TAIHAI;BASSEM, ABDEL-AZIZ;KHAN, FAUD AHMAD